Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
File:                     0y0esOyO9aIwRXqXAueqOWhYGAw.mft (raw, json)
Hash identifier:          tMY4X+KQ2zHO8vRlx5FfNcz7eg7WDiPLeD8DToTf/vA=
Subject key identifier:   F4:C6:37:EF:86:EC:D1:F9:67:73:53:AE:9B:B2:D0:44:9F:5C:8F:C0
Authority key identifier: D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
Certificate issuer:       /CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Certificate serial:       01A000CA23666ACAD05EFD33AD6BFD44979F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
Manifest number:          0E0F
Signing time:             Fri 14 Aug 2026 15:00:42 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:42 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:42 +0000
Files and hashes:         1: 0y0esOyO9aIwRXqXAueqOWhYGAw.crl (hash: NLVB6DzaHxrMox1QnFERyjFEh7f0cUUhtoGOoGzaMIA=)
                          2: NGjB506tQD4M9JyQ0y5L8sd4Coc.roa (hash: bikmvDPhCClihvHahEW9OUu5noBCQJiGJ2NSrdBDNrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:23:66:6a:ca:d0:5e:fd:33:ad:6b:fd:44:97:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
        Validity
            Not Before: Aug 14 15:00:42 2026 GMT
            Not After : Aug 15 15:00:42 2026 GMT
        Subject: CN=f4c637ef86ecd1f9677353ae9bb2d0449f5c8fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d7:45:24:cc:64:b3:d1:cd:71:c0:36:c4:86:
                    4e:48:61:95:65:34:ac:a1:99:fa:f2:97:c9:42:a5:
                    ea:17:42:89:a7:de:57:81:97:bb:df:d0:3a:9e:e5:
                    9b:b3:a3:2c:5c:a1:8b:67:05:12:d2:54:ce:71:82:
                    df:15:0c:ab:d4:9a:59:6a:36:9d:3e:3d:ab:d7:56:
                    ff:f1:32:b9:99:dc:b7:bb:3a:47:91:16:59:e4:8b:
                    05:17:fa:5a:94:e8:1e:1f:00:f3:63:9d:df:9a:35:
                    59:62:3e:39:65:33:0e:59:b6:cc:e0:5a:61:40:70:
                    3e:22:5b:74:a7:49:d8:6f:b0:dd:c7:11:8a:3a:8d:
                    fb:98:78:bd:d5:24:8b:71:a9:62:e6:2c:86:09:fd:
                    df:75:d9:3f:3c:30:90:0d:73:36:0f:d0:88:e9:32:
                    54:cc:26:12:23:46:e5:5f:c7:59:0a:22:e5:1d:63:
                    1f:ac:f9:d2:7a:10:77:42:d1:65:58:82:5f:f5:5d:
                    bf:95:86:08:ba:40:1e:45:7a:ed:ca:0b:5b:04:e0:
                    29:2f:2e:e7:02:97:7d:52:1d:bd:53:ff:5a:1e:b1:
                    16:f3:7e:26:98:00:6b:ef:d1:85:2d:f1:97:0c:6b:
                    9e:9a:a0:16:1e:8b:b1:70:14:29:30:cf:c0:a5:e9:
                    de:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C6:37:EF:86:EC:D1:F9:67:73:53:AE:9B:B2:D0:44:9F:5C:8F:C0
            X509v3 Authority Key Identifier:
                keyid:D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:32:8b:4d:8f:a2:94:33:ff:38:2a:4e:ab:3b:f3:b3:f3:a3:
         db:87:26:d5:59:57:19:a4:bf:b9:be:a1:35:6c:be:39:cc:bc:
         8c:c1:49:54:b9:95:e3:78:16:65:ad:0e:79:19:28:78:c9:66:
         cf:7c:ed:6e:37:85:63:bc:30:20:08:5a:0e:bc:8c:ff:bb:9c:
         9f:2e:5c:a8:87:0e:94:13:01:4d:44:06:4b:96:0a:ca:6f:9c:
         a6:ae:a9:f7:94:df:a1:72:a9:61:ed:be:d8:3b:45:53:18:ca:
         31:3a:87:3c:4b:d4:6d:1a:8b:be:1b:76:4f:c9:f0:a2:a2:5a:
         fc:6b:fa:32:5e:84:eb:dd:6d:8b:93:05:6e:85:a4:8e:f7:39:
         ee:f0:4d:61:67:64:1e:84:e9:de:6d:07:6a:2c:e5:98:c3:57:
         19:d0:9a:24:7a:e1:3e:b4:c9:56:ed:09:8c:ab:55:e3:c2:06:
         93:ee:58:a1:1b:87:10:cc:04:02:b5:1d:ce:29:30:1b:cc:3b:
         16:6f:f7:84:b8:bf:94:e4:fa:1d:06:16:74:1a:f3:fc:18:5c:
         bb:fc:54:b7:e2:91:60:81:09:45:15:69:d2:0f:45:c2:46:39:
         1a:78:1e:7e:83:ab:fa:3f:eb:38:59:85:e1:80:7d:59:fc:89:
         c4:56:aa:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:58 2026 by rpki-client